Author Topic: Phishing alert  (Read 910 times)

0 Members and 1 Guest are viewing this topic.

Offline usnaomi74

  • Newbie
  • *
  • Posts: 4
Phishing alert
« on: December 31, 2022, 11:28:58 AM »
Alert ID: b120ae9b115d/2022-12-31T10:13:23.608Z

I receive phishing alerts anyone know if they are real or false-positive? My email (Windows Mail) is set to send them to junk folder but Avast still catches and alerts on them. I've sent them in for analysis.

Avast Free Edition: 22.12.6044 (build 22.12.7758.769)
Virus def: 221231-0
Windows 10 Pro 22H2 19045.2364/Core i7 3770K/GA-Z68XP-UD3 rev 1.0 (BIOS F-10)/32GB G-Skill Trident X DDR3 F3-1600C7-8GTX/Asus RTX 2070 OC 8GB/Crucial 1TB MX-500 SSD/(x3) 1TB Mushkin RAW SSDs
LG Blue Ray Burner DL/Corsair RM-750w PSU/Rosewill Mid Tower Challenger Black/X-56 HOTAS/TrackIR 5 Pro/Inateck KU5211 USB 3.2 adapter/Oculus Quest 2/LG 34in Ultra Wide Screen/T Mobile 5G Home internet (KDV21)/Alura-tek Powered USB Hub 2.0 AUH1207F

Offline usnaomi74

  • Newbie
  • *
  • Posts: 4
Re: Phishing alert
« Reply #1 on: December 31, 2022, 06:04:44 PM »
Here's a window snip...

Windows 10 Pro 22H2 19045.2364/Core i7 3770K/GA-Z68XP-UD3 rev 1.0 (BIOS F-10)/32GB G-Skill Trident X DDR3 F3-1600C7-8GTX/Asus RTX 2070 OC 8GB/Crucial 1TB MX-500 SSD/(x3) 1TB Mushkin RAW SSDs
LG Blue Ray Burner DL/Corsair RM-750w PSU/Rosewill Mid Tower Challenger Black/X-56 HOTAS/TrackIR 5 Pro/Inateck KU5211 USB 3.2 adapter/Oculus Quest 2/LG 34in Ultra Wide Screen/T Mobile 5G Home internet (KDV21)/Alura-tek Powered USB Hub 2.0 AUH1207F

Offline usnaomi74

  • Newbie
  • *
  • Posts: 4
Re: Phishing alert
« Reply #2 on: January 02, 2023, 02:19:06 AM »
Still getting these alerts at times and the process is always the same as the window snippet I took relating to hxtsr.exe

Is it this process that's being flagged or the email itself? I have run full scan with Avast, Malwarebytes and SuperAntiSpyware and everything comes back clean.
« Last Edit: January 02, 2023, 02:21:03 AM by usnaomi74 »
Windows 10 Pro 22H2 19045.2364/Core i7 3770K/GA-Z68XP-UD3 rev 1.0 (BIOS F-10)/32GB G-Skill Trident X DDR3 F3-1600C7-8GTX/Asus RTX 2070 OC 8GB/Crucial 1TB MX-500 SSD/(x3) 1TB Mushkin RAW SSDs
LG Blue Ray Burner DL/Corsair RM-750w PSU/Rosewill Mid Tower Challenger Black/X-56 HOTAS/TrackIR 5 Pro/Inateck KU5211 USB 3.2 adapter/Oculus Quest 2/LG 34in Ultra Wide Screen/T Mobile 5G Home internet (KDV21)/Alura-tek Powered USB Hub 2.0 AUH1207F

Online DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 88177
  • No support PMs thanks
Re: Phishing alert
« Reply #3 on: January 02, 2023, 02:44:35 AM »
The Process Path - relates to HxTsr.exe, a program developed by Microsoft.  It is also a part of Microsoft Office 2016.
- I don't use any MS email program/s so I have no personal experience of that.

However, a search for the HxTsr.exe file name returns many hits - https://www.google.co.uk/search?q=HxTsr.exe&ie=utf-8&oe=utf-8 - check out that search and if you are using any of the programs legitimately listed then it would appear to be an email it is trying to download.  That said there are lots of hits indicating it could be malicious.

Now your screenshot indicates it has been sent to Quarantine, if you Open the Quarantine it should indicate what has been sent an email or the HxTsr.exe file  ?

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 23.9.6082 (build 23.9.8494.792) UI 1.0.781/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security